CVE-2012-6544: Linux Kernel Bluetooth Protocol Stack Information Disclosure
Summary
CVE-2012-6544: The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application tha... Affects linux versions < 3.2.30-1. Fixed in 3.2.30-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides core functionality and interfaces for hardware devices, including support for Bluetooth communication. The Bluetooth protocol stack in the Linux kernel versions before 3.6 is vulnerable to an information disclosure issue. This vulnerability arises from improper initialization of certain structures within the L2CAP and HCI implementations, allowing local users to access sensitive information from the kernel stack memory.
Vulnerability Detail
The vulnerability (CVE-2012-6544) in the Linux kernel's Bluetooth protocol stack allows local users to obtain sensitive information from the kernel stack memory. By exploiting this vulnerability, a crafted application can target the L2CAP or HCI implementation to retrieve data from the kernel stack memory. This data may contain sensitive information, potentially leading to further security breaches or unauthorized access to system resources.
How To Fix
Minimum fixed version
3.2.30-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. Updating the Linux kernel to the fixed version is the recommended solution.
Conclusion
The Linux kernel's Bluetooth protocol stack vulnerability (CVE-2012-6544) allows local users to obtain sensitive information from the kernel stack memory. To mitigate this vulnerability, it is crucial to update the Linux kernel to version 3.2.30-1 or later. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
This vulnerability allows local users to access sensitive information from the kernel stack memory, potentially leading to further security breaches or unauthorized access to system resources.
Linux systems running kernel versions before 3.6 are affected by this vulnerability.
No, this vulnerability can only be exploited by local users.
There is no known exploit available for this vulnerability at the moment.
Updating the Linux kernel to version 3.2.30-1 or later is the recommended mitigation for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
